From 03bd0df878c42a3843e9232d3abad3d555522482 Mon Sep 17 00:00:00 2001 From: bax1489 <fabian.gallenkamp@uni-hamburg.de> Date: Tue, 24 Sep 2019 12:32:23 +0200 Subject: [PATCH] Adapted ufw to current server config --- configure_ufw.yml | 6 ++++-- site.yml | 6 +++--- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/configure_ufw.yml b/configure_ufw.yml index f74ede5..cefed33 100644 --- a/configure_ufw.yml +++ b/configure_ufw.yml @@ -7,14 +7,16 @@ - name: allow ssh access from specified ip ranges ufw: rule: allow - app: OpenSSH from_ip: "{{ item }}" + to_port: 22 + proto: tcp with_items: "{{ ufw_ssh_allowed_from }}" - name: rate limiting ssh access ufw: rule: limit - app: OpenSSH + to_port: 22 + proto: tcp # setup nginx web server exception rule - name: allow access of nginx webserver from everywhere diff --git a/site.yml b/site.yml index ac94a32..301b99c 100644 --- a/site.yml +++ b/site.yml @@ -10,9 +10,9 @@ - python3-pip - python3-dev - python3-venv -# - python3.7 -# - python3.7-dev -# - python3.7-venv + - python3.7 + - python3.7-dev + - python3.7-venv - python-psycopg2 - libpq-dev - redis-server -- GitLab